$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/fqAJFXsfPqY8WYHIemo7xFXhcd0.cer File: fqAJFXsfPqY8WYHIemo7xFXhcd0.cer (raw, json) Hash identifier: jNArh1Hk3+FgtqWVkJvYOUggg9Rjc0UqQ1H9QSq/ob4= Subject key identifier: 7E:A0:09:15:7B:1F:3E:A6:3C:59:81:C8:7A:6A:3B:C4:55:E1:71:DD Authority key identifier: D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 Certificate issuer: /CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Certificate serial: 32FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer Manifest: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/fqAJFXsfPqY8WYHIemo7xFXhcd0.mft caRepository: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/ Notify URL: https://rpki.cnnic.cn/rrdp/notify.xml Certificate not before: Thu 21 Mar 2024 07:15:04 +0000 Certificate not after: Fri 21 Mar 2025 05:54:41 +0000 Subordinate resources: IP: 157.20.246.0/23 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 May 2024 15:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13053 (0x32fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0000/serialNumber=D711EC0D378158A4476FE6EA7D70A54A95195A11 Validity Not Before: Mar 21 07:15:04 2024 GMT Not After : Mar 21 05:54:41 2025 GMT Subject: CN=7EA009157B1F3EA63C5981C87A6A3BC455E171DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4b:15:53:5e:e1:5c:36:49:fc:2c:4b:8f:4f: da:17:f9:23:42:df:46:fd:02:d7:50:b3:18:77:07: f9:bc:f6:68:13:11:e5:22:3d:23:16:69:5d:6c:75: a6:de:f8:e3:47:2f:b0:10:0c:f4:55:1f:d2:64:7a: 5d:0f:b6:16:2b:53:75:09:5f:9b:2d:09:dd:e3:1c: 28:1e:f5:a0:8c:c0:1c:9d:d5:7b:70:aa:31:45:5b: 05:ce:b6:4e:b9:a9:3f:98:de:9a:3a:00:6b:bd:e3: 51:20:2b:1d:9d:51:01:20:c0:74:63:8c:fc:dc:a9: 1f:a2:9c:ac:dd:04:1e:3b:89:fa:fa:f1:f2:2b:1b: 7e:1d:b5:7d:d5:19:23:1d:e3:af:a5:75:ab:d8:7d: 6c:19:fd:e4:5f:e0:13:59:05:fb:ca:1f:f5:7b:24: 32:58:e8:c9:f1:82:4f:19:10:6b:5c:0f:b9:bd:2d: 29:51:d5:fb:12:18:bc:55:c6:a7:27:b3:f3:06:6d: 5d:19:1d:f8:0a:5b:2a:03:22:90:33:64:f0:71:db: 0f:e9:f9:cb:db:89:10:f8:c1:db:ba:a7:46:7f:d2: 3e:9e:c4:62:49:9a:44:e2:f0:7e:38:5b:89:e7:b7: 73:7e:b5:82:fc:94:96:0d:ce:b1:d5:4d:b7:8a:2d: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A0:09:15:7B:1F:3E:A6:3C:59:81:C8:7A:6A:3B:C4:55:E1:71:DD X509v3 Authority Key Identifier: keyid:D7:11:EC:0D:37:81:58:A4:47:6F:E6:EA:7D:70:A5:4A:95:19:5A:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/ RPKI Manifest - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3271/fqAJFXsfPqY8WYHIemo7xFXhcd0.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.246.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:b4:7d:f0:b8:84:02:eb:14:be:1a:c1:22:65:22:b8:38:6d: 10:22:1d:96:9e:dd:5f:86:6e:0e:d8:b7:b5:ca:02:a0:cb:7c: 66:e0:dc:43:dd:56:45:9e:f8:77:45:26:be:84:35:1c:41:f5: 02:a0:d4:f3:73:07:cc:4f:b2:4f:7c:d9:4d:e5:6a:69:6b:7a: 79:7c:2a:2f:f1:db:02:d5:e6:c9:48:68:19:ad:40:29:27:11: 22:7f:77:70:8a:a8:fd:42:e9:79:05:cc:ef:76:64:df:52:c4: 75:1a:a4:e8:15:e1:b1:7a:34:db:d1:8d:38:20:93:ed:7d:d2: 48:a7:9d:e9:0f:39:8f:1d:e1:1b:6b:62:59:f8:42:6d:70:62: f6:7e:e0:c2:ab:27:94:3d:50:70:ad:3e:a5:e1:80:e7:fe:91: 85:4a:e1:87:ac:9d:46:d4:7d:8f:ac:de:9b:3f:e3:f6:21:fe: d2:89:d7:af:e3:1a:07:05:e3:b3:dd:8c:59:4c:a1:ef:6b:a3: 39:81:71:a9:0f:6c:71:39:7a:41:f8:ef:e9:f6:ec:74:8d:0f: 8a:92:19:b3:02:f8:c7:5d:27:a2:59:e4:e9:ab:83:3f:67:bf: 95:f1:75:f3:de:7b:6a:3f:9e:9c:22:d4:f3:e3:d8:15:95:ed: a6:2f:73:53 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICMv0wDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx NjJFM0QwMDAwMTEwLwYDVQQFEyhENzExRUMwRDM3ODE1OEE0NDc2RkU2RUE3RDcw QTU0QTk1MTk1QTExMB4XDTI0MDMyMTA3MTUwNFoXDTI1MDMyMTA1NTQ0MVowMzEx MC8GA1UEAxMoN0VBMDA5MTU3QjFGM0VBNjNDNTk4MUM4N0E2QTNCQzQ1NUUxNzFE RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOpLFVNe4Vw2SfwsS49P 2hf5I0LfRv0C11CzGHcH+bz2aBMR5SI9IxZpXWx1pt7440cvsBAM9FUf0mR6XQ+2 FitTdQlfmy0J3eMcKB71oIzAHJ3Ve3CqMUVbBc62TrmpP5jemjoAa73jUSArHZ1R ASDAdGOM/NypH6KcrN0EHjuJ+vrx8isbfh21fdUZIx3jr6V1q9h9bBn95F/gE1kF +8of9XskMljoyfGCTxkQa1wPub0tKVHV+xIYvFXGpyez8wZtXRkd+ApbKgMikDNk 8HHbD+n5y9uJEPjB27qnRn/SPp7EYkmaROLwfjhbiee3c361gvyUlg3OsdVNt4ot kTsCAwEAAaOCAlUwggJRMB0GA1UdDgQWBBR+oAkVex8+pjxZgch6ajvEVeFx3TAf BgNVHSMEGDAWgBTXEewNN4FYpEdv5up9cKVKlRlaETAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFgGA1UdHwRRME8wTaBLoEmGR3JzeW5jOi8vcnBraS5jbm5pYy5j bi9ycGtpL0E5MTYyRTNEMDAwMC8xeEhzRFRlQldLUkhiLWJxZlhDbFNwVVpXaEUu Y3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFw bmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQx RkYyLzF4SHNEVGVCV0tSSGItYnFmWENsU3BVWldoRS5jZXIwDwYDVR0TAQH/BAUw AwEB/zAOBgNVHQ8BAf8EBAMCAQYwgdgGCCsGAQUFBwELBIHLMIHIMDkGCCsGAQUF BzAFhi1yc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI3 MS8wWAYIKwYBBQUHMAqGTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYy RTNEMDAwMC8zMjcxL2ZxQUpGWHNmUHFZOFdZSEllbW83eEZYaGNkMC5tZnQwMQYI KwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5pYy5jbi9ycmRwL25vdGlmeS54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGdFPYwDQYJKoZIhvcNAQELBQAD ggEBAAu0ffC4hALrFL4awSJlIrg4bRAiHZae3V+Gbg7Yt7XKAqDLfGbg3EPdVkWe +HdFJr6ENRxB9QKg1PNzB8xPsk982U3lamlrenl8Ki/x2wLV5slIaBmtQCknESJ/ d3CKqP1C6XkFzO92ZN9SxHUapOgV4bF6NNvRjTggk+190kinnekPOY8d4RtrYln4 Qm1wYvZ+4MKrJ5Q9UHCtPqXhgOf+kYVK4YesnUbUfY+s3ps/4/Yh/tKJ16/jGgcF 47PdjFlMoe9rozmBcakPbHE5ekH47+n27HSND4qSGbMC+MddJ6JZ5Omrgz9nv5Xx dfPee2o/npwi1PPj2BWV7aYvc1M= -----END CERTIFICATE-----Generated at Sun May 19 10:28:33 2024 by rpki-client on console-ams.rpki-client.org